For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

EdH_135054's avatar
EdH_135054
Icon for Nimbostratus rankNimbostratus
Oct 05, 2013

Configuring F5 to use AJP to Tomcat server running hybris

Would like to find out how to properly configure F5 LTM to use AJP protocol when talking to tomcat server running hybris on port 8009.   Traffic is coming in on port 443 (SSL) and I need to offloa...
BIG-IP Access Policy Manager (APM)
cloud
deployment
security
vmware
EdH_135054's avatar
EdH_135054
Icon for Nimbostratus rankNimbostratus
Oct 07, 2013

Thanks very much. We are in the process of moving F5 into production. Our attempts at simple SSL Offload, from port 443 to port 9002 (hybris) AJP has proven a bit of a challenge. It seems to be mostly working now. Apache as a LB and AJP was a plan B as we are using it in our performance environment which is not migrated yet.

 

Another question for you. Out of 20,000 service calls through the F5 to hybris, we had 6 failures (see below). Would you consider this normal or not normal? You would think if it worked once, it should always work, but life is full of suprises. Would be interested in your thoughts.

 

DEBUG output created by Wget 1.12 on xxxx.1.0.0. --2013-10-05 19:15:37-- https://hb-xxxx.cs.xxx/rest/v1/xxxbasesite/prices Resolving hb-xxx.cs.xxx... 192.xxx.xx.xxx Caching hb-xxx.cs.xxx => 192.xxx.xx.xxx Connecting to hb-xxx.cs.xxx|192.xxx.xx.xxx|:443... connected. Created socket 5. Releasing 0x200615c8 (new refcount 1). Initiating SSL handshake. SSL handshake failed. Closed fd 5 Unable to establish SSL connection.